CVE-2024-53481 describes a Cross Site Scripting (XSS) vulnerability in PHPGurukul Beauty Parlour Management System v1.1. The vulnerability exists in the profile.php file where the "Firstname" and "Last name" parameters do not properly sanitize user input, allowing remote attackers to inject arbitrary HTML or script code. This can lead to execution of malicious code in the victim's browser session, impacting confidentiality and integrity but not availability. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and affects confidentiality and integrity with no impact on availability.

Successful exploitation allows remote attackers to execute arbitrary HTML or script code in the context of the victim's browser, potentially leading to information disclosure or session hijacking. The impact is limited to confidentiality and integrity with no direct impact on system availability. There are no known exploits in the wild at this time.

No official patch or remediation has been announced for this vulnerability. Users of PHPGurukul Beauty Parlour Management System v1.1 should monitor vendor advisories for updates. Until a fix is available, consider applying input validation or sanitization controls at the application or web server level to mitigate injection of malicious HTML in the affected parameters.